Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-28_c2347d8a3e52a27de85563317388616d_mafia

  • Size

    462KB

  • Sample

    240328-q7bglsfg41

  • MD5

    c2347d8a3e52a27de85563317388616d

  • SHA1

    d5a8520116ef92053a21433488098ecbe15b5b7e

  • SHA256

    0bca39933ff8941c0951974ff2b64b31b4c2da58f99e12f98ec860ad1fb00ddb

  • SHA512

    4f53741082740869a47bdae264f43cdcde402509db486ee9eea89bd199b5d0ac41cfe69cd3d41c687014bd6678762f2fdfa01a95ab7c27832595b461c6031661

  • SSDEEP

    6144:0A4psmawWIrFUJe5X8bbUpxOZgu7iHVDBnon8Q9KV8Yu0hNNXT/Je2W306sHZi:0oJe5X8b4/Vanj90Bu0v2G5i

Score
7/10

Malware Config

Targets

    • Target

      2024-03-28_c2347d8a3e52a27de85563317388616d_mafia

    • Size

      462KB

    • MD5

      c2347d8a3e52a27de85563317388616d

    • SHA1

      d5a8520116ef92053a21433488098ecbe15b5b7e

    • SHA256

      0bca39933ff8941c0951974ff2b64b31b4c2da58f99e12f98ec860ad1fb00ddb

    • SHA512

      4f53741082740869a47bdae264f43cdcde402509db486ee9eea89bd199b5d0ac41cfe69cd3d41c687014bd6678762f2fdfa01a95ab7c27832595b461c6031661

    • SSDEEP

      6144:0A4psmawWIrFUJe5X8bbUpxOZgu7iHVDBnon8Q9KV8Yu0hNNXT/Je2W306sHZi:0oJe5X8b4/Vanj90Bu0v2G5i

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks